There's also the fact that you can't verify that the verification done applies to each machine in the field. If your crypto system has non-verifiability of who

There's also the fact that you can't verify that the verification done applies to each machine in the field. If your crypto system has non-verifiability of who you voted for as a requirement. How do you prove that the code actually running on the machine didn't change the vote? Especially seeing as actual machines have code other than the election software running on it, think touch screen controllers, etc..